Orphaned jurisdiction objects (those jurisdictions that do not belong to any CA) are present in the corresponding RSA Certificate Manager installation. Orphaned jurisdiction objects can get created when an RSA Certificate Manager administrator initiates the creation of a new CA (through CA Operations workbench), saves new jurisdiction configuration, and then aborts the process before a CA can be created.

Resolution

Remove orphaned jurisdiction object(s) from the RSA Certificate Manager installation:1. Download the tool "a39031list-orphaned-juri-version2.zip" (click on the link to download):a39031list-orphaned-juri-version2.zip2. Unzip "a39031list-orphaned-juri-version2.zip" to the following folder in RSA Certificate Manager installation: RSA_CM/WebServer/admin-server/ca/adminNote that the zip contains the following two files: list-orphaned-juri-v2.xuda list-orphaned-juri-deluobj.xuda3. Access the tool on browser (you must have RCM admin certificate in browser) using the following URL:https://<RCM-hostname>:444/ca/admin/list-orphaned-juri-v2.xuda4. The above page/tool will show a list of jurisdiction objects followed by a list of CA objects. If one or more orphan jurisdictions exist, a button 'DELETE Object' will show on each row representing orphan jurisdiction. Clicking on 'DELETE Object' button for an orphan jurisdiction will delete the object from RCM database.IMPORTANT: Before clicking on 'DELETE Object' button to remove an orphan jurisdiction, ensure that you have made a full RCM backup or at least the RCM db backup.